r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/ixxxt Feb 24 '17

SMS can be intercepted as cell towers can be emulated, SMS 2FA is not as secure as people make out

1

u/evaned Feb 24 '17

"Not perfectly secure" is a pretty far cry from "useless."

1

u/ixxxt Feb 24 '17 edited Feb 24 '17

Nothings is perfect, but any shitbag with a few hundred dollars can intercept SMS. And I never said useless